2 AD Domains

[serradja]

We have 2 domains, one for staff and one for students.
Domain 1 student.admin.domain.com
Domain 2 admin.domain.com

The email is different to the AD domain
email 1 student.domain.com
email 2 domain.com

When we have the ADDomain set in XCreds profile to Domain 1, it creates a kerberos ticket for any user on the student.admin.com domain, but if a domain 2 user logs in, it tries to create a ticket but fails as no user exists.

I then added the Domain 2 to AdditionalADDomains but it still fails to check both domains.

Is there any way to get both domains?

I have created a temp config files for Domain 2 with our teaching computers but this means they can only get a kerberos ticket on those machines.

[tperfitt]

Can you get me the log from "but if a domain 2 user logs in, it tries to create a ticket but fails as no user exists". It would be helpful to track down why this is happening.